Incident
Reporting
What to do if you have concerns about security
Don't worry, we can help - you should call us immediately on +
44 (0) 1624 696000 between 8.00am - 5.00pm (UK time) during working days
and advise us of what has happened. You should also change your sign on
details to something only you know.
Current
Incidents
Frequently
asked questions about e-mail fraud
View
example of e-mail scam
A common approach used by criminals at present starts by an e-mail being
sent out asking the recipient to ‘re-register' or 're-activate'
their account at a replica of their bank website or via pop-up window.
Across the financial services industry there have been a number of occurrences
of these e-mails being sent out.
Nationwide International has not, and never will, send out any such e-mail.
The e-mails should be deleted immediately without responding. Customers
should be wary of responding to unsolicited e-mails and should only sign-on
to the Internet Bank by typing www.nationwideinternational.com into their
browser, never by clicking on a link.
A second part of this fraud involves someone offering to pay money into
your account on the understanding that you then transfer it overseas.
In return for your efforts you are promised a commission. These transactions
often involve the proceeds of fraudulent activity and anyone that participates
could become the subject of a police investigation.
| Frequently
asked questions about e-mail fraud |
Return
to top |
In the past Nationwide Building Society members have been targeted by
e-mail fraudsters. The details below are based on their experiences and
give an indication of what you should do if you are targeted as a customer
of Nationwide International. It should be stressed that Nationwide International’s
Internet Banking service requires all transfer requests to be sent to
destinations that have been pre-designated in writing or by cheque made
payable to you at your home address.
| 1. |
How did they get hold of my e-mail address? |
Return
to top |
| |
We believe the fraudsters are using a large volume of random combinations
of people's names and common domain names (e.g. hotmail.com) by
trial and error to produce potential addresses for emailing.
If you have provided Nationwide International with your e-mail address
in the past, be assured that we have not shared it with anyone.
|
| 2. |
How did they know I am a Nationwide International customer? |
Return
to top |
| |
They didn't. Fraudsters send large volumes of e-mails to random
e-mail addresses in the hope of, by chance, targeting Nationwide
International customers. This view is supported by the number of
non-Nationwide International customers who have also received fraudulent
e-mails.
|
| 3. |
What will happen if you have clicked on the link? |
Return
to top |
| |
If you have clicked on the link, a pop up window may appear asking
you to enter your Internet Banking sign-on information. This window
will appear in front of the Nationwide International website, or
something that resembles the Nationwide International website. Please
be aware that this is fraudulent attempt to gain access to your
sign-on information and the window should be ignored and closed
immediately.
There have been cases where the purpose of the phishing e-mail was
not to gather personal details about the recipient but was intended
to act as a delivery mechanism for malicious software such as Trojans.
The Trojan can be delivered to the user's PC either when they view
the e-mail or click on the link contained in it and view the web
page that opens.
E-mails which fall into this category are frequently very badly
written, almost to the point of being comical.
The fraudsters hope that the recipient will forward this e-mail
to their friends to show how un-intelligent the e-mail is. What
the recipient and his/her friends don't realise is that the joke
is on them, as all of the PCs are likely to be infected by the malicious
software hidden behind the e-mail.
Nationwide International will never request confidential information
or security details in an e-mail. If you are concerned your personal
information may have been compromised in any way, please call
+ 44 (0) 1624 696000 between 8.00am - 5.00pm (UK time) during working
days.
|
| 4. |
What should I do if I have entered my sign-on details into
the pop up window? |
Return
to top |
| |
If you have entered your sign-on details into the pop up window:
- Change your sign on details immediately (memorable data and
your passnumber). To do this, sign on to the Internet Banking
service, click on preferences and use the link on the left-hand
side.
- Send us a message from inside the Internet Bank service. This
is secure.
- Monitor your accounts for unusual activity and report any suspicious
activity to us immediately by calling
+ 44 (0) 1624 696000 between 8.00am - 5.00pm (UK time) during
working days.
|
| 5. |
What has Nationwide International done? |
Return
to top |
| |
We have designed the Internet Banking service to only allow transfer
requests to destinations that you have already pre-designated in
writing or by cheque made payable to you at your home address.
We continue to advise customers to:
- Keep your data secure
- Install anti-virus and personal firewall software
- Keep your browser and operating system up to date
- Be vigilant when using Internet cafés
We will continue to closely monitor any activity that could lead
to fraud and will keep members informed of any potential threats
as they arise.
|
| 6. |
What is being done to stop this happening again? |
Return
to top |
| |
We at Nationwide are doing all we can to prevent potential fraud
by working closely with Association for Payment Clearing Services
(APACS), the National Hi Tech Crime Unit (NHTCU), British Bankers
Association (BBA) and the Financial Services Industry. We will continue
to closely monitor any activity that could lead to fraud and will
keep members informed of any potential threats as they arise.
We would remind anyone using the Internet Banking service to keep
their memorable data and pass number confidential. We also encourage
customers to install and maintain up-to-date anti-virus software.
In addition, personal firewalls and up to date browsers can reduce
the likelihood of online fraud.
Nationwide International will never request confidential
information or security details in an email.
If you do receive an e-mail that seems to have been sent from Nationwide
International asking for your personal banking details, passnumbers,
passwords, or you are suspicious in any way, please delete it immediately.
Do not call any telephone number or action any request in the email.
|
| 7. |
Is Internet banking secure? |
Return
to top |
| |
Yes the Internet Banking service is secure. We use 128-bit encryption
(this technology scrambles the data relating to your account to
ensure that your information cannot be read by anyone else) and
are constantly updating our technologies in line with new security
measures. Our Internet banking promise is available here for your
peace of mind.
|
| View
example of e-mail scam |
Return
to top |
Please note:
- The following are actual examples of fraudulent
e-mails.
- They have not been sent out by
Nationwide.
- Please do not type the link below into your
browser.
|
Example One:
 |
Dear client of the Nationwide,
As the Technical service of the bank have been currently updating
the software, we kindly ask you to follow the reference given below
to confirm your data, otherwise your access to the system may be
blocked.
http://www.nationwide.co.uk/quickapp/aip/default.htm?source-nationwide
We are grateful for your cooperation.
© Nationwide Building
Society
|
Example Two:
From: Verification [verify124@nationwide.co.uk]
Sent:
To:
Subject: Nationwide E-mail Verification:
Dear Nationwide Bank Member,
This email was sent by the Nationwide server to verify your e-mail
address. You must complete this process by clicking on the link
below and entering in the small window your Nationwide Customer
Number, Passnumber and Memorable Data.
This is done for your protection -- because some of our
members no longer have access to their email addresses and
we must verify it.
To verify your e-mail address and access your bank account,
click on the link below. If nothing happens when you click on the
link (or you use AOL), copy and paste the link into
the address bar of your web browser.
-------------------------------------
Thank you for using Nationwide!
-------------------------------------
This automatic email sent to:
Do not reply to this email. |
Return
to top |
|